New Tumbleweed snapshot 20241022 released!

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20241022 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: acpica (20240827 -> 20240927) bind (9.20.2 -> 9.20.3) gcc13 gjs (1.82.0 -> 1.82.1) gnome-online-accounts (3.52.0 -> 3.52.1) gnome-shell (47.0 -> 47.1) gnome-shell-extensions (47.0 -> 47.1) gnome-sudoku (47.0 -> 47.1.1) gnome-text-editor (47.0 -> 47.1) hwinfo (23.2 -> 23.3) kernel-firmware (20241001 -> 20241018) libjcat (0.2.1 -> 0.2.2) libspelling (0.4.3 -> 0.4.4) meson (1.5.2 -> 1.6.0) mutter (47.0+19 -> 47.1) nautilus (47.0+8 -> 47.0+14) ncurses (6.5.20240928 -> 6.5.20241019) ovmf (202405 -> 202408) perl-XML-Parser pipewire python-kiwi (10.1.11 -> 10.1.15) samba (4.21.0+git.363.84c94ca948f -> 4.21.1+git.367.e1da597d86e) selinux-policy (20241018 -> 20241021) texlive tigervnc webkit2gtk3 (2.46.1 -> 2.46.2) wireplumber xfsprogs (6.10.1 -> 6.11.0) xz (5.6.2 -> 5.6.3) === Details === ==== acpica ==== Version update (20240827 -> 20240927) - Update to 20240927 * Fix the acpixf.h file which caused issues for the last release (before this) 20240827 * Fix the pointer offset for the SLIC table ==== bind ==== Version update (9.20.2 -> 9.20.3) Subpackages: bind-doc bind-utils - Update to release 9.20.3 New Features: * Log query response status to the query log. * Log a query response summary using the new responses category. Logging can be controlled via the responselog option and via rndc responselog. * Added WALLET type. * Add the new record type WALLET (262). This provides a mapping from a domain name to a cryptographic currency wallet. Multiple mappings can exist if multiple records exist. Feature Changes: * Set logging category for notify/xfer-in-related messages. * Some notify and xfer-in-related log messages were logged at the “general” category level instead of their own category. This has been fixed. * Allow IXFR-to-AXFR fallback on DNS_R_TOOMANYRECORDS. * This change allows fallback from an IXFR failure to AXFR when the reason is DNS_R_TOOMANYRECORDS. Bug Fixes: * Fix a statistics channel counter bug when “forward only” zones are used. * When resolving a zone with a “forward only” policy, and finding out that all the forwarders were marked as “bad”, the “ServerQuota” counter of the statistics channel was incorrectly increased. This has been fixed. * Fix a bug in the static-stub implementation. * Static-stub addresses and addresses from other sources were being mixed together, resulting in static-stub queries going to addresses not specified in the configuration, or alternatively, static-stub addresses being used instead of the correct server addresses. * Don’t allow statistics-channels if libxml2 and libjson-c are not configured. * When BIND 9 is not configured with the libxml2 and libjson-c libraries, the use of the statistics-channels option is a fatal error. * Separate DNSSEC validation from long-running tasks. * Split CPU-intensive and long-running tasks into separate threadpools in a way that the long-running tasks - like RPZ, catalog zone processing, or zone file operations - don’t block CPU-intensive operations like DNSSEC validations. * Fix an assertion failure when processing access control lists. * The named process could terminate unexpectedly when processing ACLs. This has been fixed. * Fix a bug in Offline KSK using a ZSK with an unlimited lifetime. * If the ZSK had an unlimited lifetime, the timing metadata Inactive and Delete could not be found and were treated as an error, preventing the zone from being signed. This has been fixed. * Limit the outgoing UDP send queue size. * If the operating system UDP queue got full and the outgoing UDP sending started to be delayed, BIND 9 could exhibit memory spikes as it tried to enqueue all the outgoing UDP messages. It now tries to deliver the outgoing UDP messages synchronously; if that fails, it drops the outgoing DNS message that would get queued up and then timeout on the client side. * Do not set SO_INCOMING_CPU. * Remove the SO_INCOMING_CPU setting as kernel scheduling performs better without constraints. * Fix the rndc dumpdb command’s error reporting. * The rndc dumpdb command was not reporting errors that occurred when named started up the database dump process. This has been fixed. * Fix long-running incoming transfers. * Incoming transfers that took longer than 30 seconds would stop reading from the TCP stream and the incoming transfer would be indefinitely stuck, causing BIND 9 to hang during shutdown. * This has been fixed, and the max-transfer-time-in and max-transfer-idle-in timeouts are now honored. * Fix an assertion failure when receiving DNS responses over TCP. * When matching the received Query ID in the TCP connection, an invalid Query ID could cause an assertion failure. This has been fixed. ==== gcc13 ==== Subpackages: cpp13 gcc13-locale libgccjit0-gcc13 - Remove epiphany build, newlib no longer builds for it. - Add gcc13-pr116657.patch to fix for parsing tzdata 2024b [gcc#116657] ==== gjs ==== Version update (1.82.0 -> 1.82.1) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.82.1: + Fixed gnome-shell crash when switching user after upgrade from Fedora 40 to Fedora 41 ==== gnome-online-accounts ==== Version update (3.52.0 -> 3.52.1) Subpackages: gnome-online-accounts-lang libgoa-1_0-0 libgoa-backend-1_0-2 - Update to version 3.52.1: + Bugs fixed: - goakerberosprovider: don't assume all errors are auth errors - goaoauthprovider: fix expected NULL GError + Updated translations. ==== gnome-shell ==== Version update (47.0 -> 47.1) Subpackages: gnome-extensions gnome-shell-calendar gnome-shell-lang - Update to version 47.1: + Improve quick settings accessibility + Use accent color in tablet configuration UI + Improve accuracy of inset box shadows + Fix `PopupSwitchMenuItem::toggled` passing wrong state + Consider text direction when handling arrow keys in sliders + Fix layout issues with new dialog style + Fix uneven padding in notification headers + Fixed crash + Misc. cleanups and bug + Updated translations. ==== gnome-shell-extensions ==== Version update (47.0 -> 47.1) Subpackages: gnome-shell-classic gnome-shell-extensions-common gnome-shell-extensions-common-lang - Update to version 47.1: + classic: Add missing top-bar indicators + window-list: - Fix window state styling - Fix "ignore-workspace" setting getting reset + Misc. bug fixes and cleanups ==== gnome-sudoku ==== Version update (47.0 -> 47.1.1) Subpackages: gnome-sudoku-lang - Update to version 47.1.1: + Fix metainfo screenshots - Update to version 47.1: + Fix tooltip font color in light mode + Fix a case when the highlighter doesn't get cleared with undo + Fix view not grabbing the focus on start blocking keyboard shortcuts + Fix reset zoom shortcut not working + Fix pause button having no tooltip + Fix meson build requirements + Updated translations. ==== gnome-text-editor ==== Version update (47.0 -> 47.1) Subpackages: gnome-text-editor-lang - Update to version 47.1: + Fix document to default to implicit trailing newlines + Improve text wrapping for banners on small form factors ==== hwinfo ==== Version update (23.2 -> 23.3) Subpackages: libhd23 - merge gh#openSUSE/hwinfo#148 - avoid reporting of spurious usb storage devices (bsc#1223330) - 23.3 ==== kernel-firmware ==== Version update (20241001 -> 20241018) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20241018 (git commit 2f0464118f40): * check_whence.py: skip some validation if git ls-files fails * qcom: Add Audio firmware for X1E80100 CRD/QCPs * amdgpu: DMCUB updates forvarious AMDGPU ASICs * brcm: replace NVRAM for Jetson TX1 * rtlwifi: Update firmware for RTL8192FU to v7.3 * make: separate installation and de-duplication targets * check_whence.py: check the permissions * Remove execute bit from firmware files * configure: remove unused file * rtl_nic: add firmware rtl8125d-1 - Update to version 20241014 (git commit 99f9c7ed1f4a): * iwlwifi: add gl/Bz FW for core91-69 release * iwlwifi: update ty/So/Ma firmwares for core91-69 release * iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops * cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops * linux-firmware: update firmware for en8811h 2.5G ethernet phy * QCA: Add Bluetooth firmwares for WCN785x with UART transport - Update to version 20241011 (git commit 808cba847c70): * mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher * ath12k: WCN7850 hw2.0: update board-2.bin (bsc#1230596) * ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1 * ath12k: QCN9274 hw2.0: add board-2.bin * copy-firmware.sh: rename variables in symlink hanlding * copy-firmware.sh: remove no longer reachable test -L * copy-firmware.sh: remove no longer reachable test -f * copy-firmware.sh: call ./check_whence.py before parsing the file * copy-firmware.sh: warn if the destination folder is not empty * copy-firmware.sh: add err() helper * copy-firmware.sh: fix indentation * copy-firmware.sh: reset and consistently handle destdir * Revert "copy-firmware: Support additional compressor options" * copy-firmware.sh: flesh out and fix dedup-firmware.sh * Style update yaml files * editorconfig: add initial config file * check_whence.py: annotate replacement strings as raw * check_whence.py: LC_ALL=C sort -u the filelist * check_whence.py: ban link-to-a-link * check_whence.py: use consistent naming * Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin * tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31 - Skip invocation of check_whence.py at copying: copy-file-skip-check.patch - Refresh copy-file-ignore-README.patch - Drop obsoleted --ignore-duplicates option to copy-firmware.sh - Drop the ath12k workaround again - Update to version 20241010 (git commit d4e688aa74a0): * rtlwifi: Add firmware v39.0 for RTL8192DU * Revert "ath12k: WCN7850 hw2.0: update board-2.bin" (replaced with a newer firmware in this package instead) - update aliases - Update to version 20241004 (git commit bbb77872a8a7): * amdgpu: DMCUB DCN35 update * brcm: Add BCM4354 NVRAM for Jetson TX1 * brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram ==== libjcat ==== Version update (0.2.1 -> 0.2.2) - Update to version 0.2.2: + New Features: - Add bt-logindex blob kind. + Bugfixes: - Increase test coverage for ED25519 support. - Save the auto-generated private key with 0600 file permissions. - Switch ED25519 support to not directly using Nettle. ==== libspelling ==== Version update (0.4.3 -> 0.4.4) - Update to version 0.4.4: + Adds a few dozen translations for menu items. - Add lang subpackage and macros. Also provide libspelling from the shared lib, allow install of lang subpackage. ==== meson ==== Version update (1.5.2 -> 1.6.0) Subpackages: meson-vim - Update ro version 1.6.0: + Support for OpenXL compiler in AIX. + Default to printing deprecations when no minimum version is specified. + Cargo subprojects is experimental. + Dependencies from CMake subprojects now use only PUBLIC link flags. + New built-in option for default both_libraries. + New as_static and as_shared methods on internal dependencies. + Support for DIA SDK. + Support for LLVM-based flang compiler. + nvc and nvc++ now support setting std. + Tools can be selected when calling has_tools() on the Qt modules. + Simple tool to test build reproducibility. + Support for variable in system dependencies. + test() and benchmark() functions accept new types. + Zig 0.11 can be used as a C/C++ compiler frontend. ==== mutter ==== Version update (47.0+19 -> 47.1) Subpackages: mutter-lang - Update to version 47.1: + gwakeup: Reduce wake-ups to only first item in queue + x11: Reduce chances XPending does recvmsg() syscall + Fix grabbing tablet devices + Fix misplaced windows and random resizes on scaled monitors + Fix explicit sync with virtual monitors w/o pipewire streams + Improve detecting preferred primary devices + Fixed crashes + Misc. bug fixes and cleanups + Updated translations. - Update to version 47.0+24: * stage-impl: Ensure that a sync object is created in headless mode * backends/x11: Avoid potential crash in pad_switch_mode * display: Do not crash attempting to display OSD for unknown Wacom device * wayland/drm-lease: Do not add connector twice on lease disappeared * wayland/drm-lease: Hold device fd when listing leases ==== nautilus ==== Version update (47.0+8 -> 47.0+14) Subpackages: gnome-shell-search-provider-nautilus libnautilus-extension4 nautilus-lang - Update to version 47.0+14: * nautilus-tag-manager: Drop tinysparql 2to3 migration * Updated translations. ==== ncurses ==== Version update (6.5.20240928 -> 6.5.20241019) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20241019 + fixes for compiler warnings/cppcheck. + build-fixes for DJGPP configuration (patches by Stas Sergeev) - Add ncurses patch 20241006 + fixes for compiler warnings/cppcheck. + use xterm+alt+title in wezterm -TD ==== ovmf ==== Version update (202405 -> 202408) Subpackages: qemu-ovmf-x86_64 - Removed the following patch files because they are merged to edk2-stable202408: - ovmf-EmbeddedPkg-Library-Support-SOURCE_DATE_EPOCH-in-Vir.patch - ovmf-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch - Update to edk2-stable202408 - Features (https://github.com/tianocore/edk2/releases): CryptoPkg:Add more crypto APIs (AESGCM/PEM/X509/RSA/PKCS5/PKCS7/Authenticode) based on Mbedtls CryptoPkg: Enable Openssl native instruction support for AARCH64 CryptoPkg: Add support for aes128-sha256 and aes256-sha256 cipher UefiCpuPkg: S3 cleanup MdePkg/BaseLib: Add CRC16 CCITT False Implementation DynamicTablesPkg: ACPI TPM2 generator DynamicTablesPkg: Prepare for supporting other archs BaseTools: Add VS2022 support OvmfPkg: Add LoongArchVirt instance to OvmfPkg and enable it - Patches (git log --oneline --date-order edk2-stable202405..edk2-stable202408): b158dad150 EmulatorPkg: VS2022 Support on WinHost. b0f43dd3fd DynamicTablesPkg: Add parser for Tpm2 CM object d24df10cee DynamicTablesPkg: Add HexDump for CM Object parser 75a9afa540 DynamicTablesPkg: ACPI TPM2 generator 2bff58935f MdePkg: Tpm2Acpi.h: Max size for Parameters field ab6ad2fbdb NetworkPkg/DxeHttpLib: Support HTTP CONNECT message in Tx path. 9761137743 RedfishPkg: Allow deletion of the bootstrap account a29a9cce5f MdePkg/BaseLib: Add CRC16 CCITT False Implementation. 472be4d139 MdeModulePkg ConPlatform: Support IAD-style USB input devices. 1b37b3659b .github/request-reviews.yml: Use GitHub App authentication 51ada84cd5 .github/request-reviews.yml: Move workflow Py code to file 59ad8aeda6 .github/request-reviews.yml: Formatting (non-functional) 32a099c358 .github/request-reviews.yml: Improve doc and dbg messages f617b6ee0e .github/request-reviews.yml: Only post non-collab message once 09ad1a0072 .github/request-reviews.yml: Add non-collab admin notification e86647decd .github/request-reviews.yml: Update PR reviewer exclusion eaf2b82eda .github/request-reviews.yml: Removed unused functionality d3e9e10770 .github/request-reviews.yml: Switch to PyGithub 98f17cdcf4 .github/request-reviews.yml: Switch to GitPython 057c26710a .github/request-reviews.yml: Cache PIP modules 38c4cd4e88 .github/request-reviews.yml: Use sparse checkout 5d43165ff8 UefiCpuPkg: rename and simplify IsAddressValid function cff0641360 UefiCpuPkg: remove unneeded code in SmmProfilePFHandler 8b8ac5d986 UefiCpuPkg: rename the SmiDefaultPFHandler function cae90a8390 UefiCpuPkg: Remove duplicate code in SmiPfHandler b5c9bbff8e UefiCpuPkg:CpuDeadLoop in SmiPFHandler if SMM profile is disabled b3631ca944 UefiCpuPkg: remove unnecessary manipulation for smm page table 9f29fbd33b UefiCpuPkg: always create full mapping SMM page table 47bb9f9a97 UefiCpuPkg: Revert "UefiCpuPkg/PiSmmCpuDxeSmm: Fix system..." 68b4c4b481 BaseTools/Capsule: Support Different Hash Algorithm for Payload Digest 5ff99e0dab MdePkg /IoRemappingTable: Define additional IORT SMMUv3 node flags. 159f1aee56 BaseTools/WinRcPath: Improve Performance. f203a6db92 OvmfPkg: Pass correct virtio-scsi request size 24a375fcdd UefiCpuPkg/PiSmmCpuDxeSmm: Avoid use global variable in InitSmmS3Cr3 8f3e132512 UefiCpuPkg/PiSmmCpuDxeSmm: Clean redundant SmmS3Cr3 Init 66b4a2f91d UefiCpuPkg/PiSmmCpuDxeSmm: clean unused PCD for S3 4f5de749cb DynamicTablesPkg/DynamicTableManagerDxe: Adds X64 GetAcpiTablePresenceInfo bc0fc75637 DynamicTablesPkg/AcpiFadtLib: Adds FADT X64 generator 967cbd87b7 DynamicTablesPkg: Adds X64 namespace object 87d3a6272c UefiCpuPkg/PiSmmCpuDxeSmm: Iterate page table to find proper entry 24f8b97a9d UefiCpuPkg/PiSmmCpuDxeSmm: Remove assert check for PDE entry not exist f73b97fe7f UefiCpuPkg/PiSmmCpuDxeSmm: Check PDE entry exist or not before use 9d8a5fbd0c UefiCpuPkg/PiSmmCpuDxeSmm: Enable single step after SmmProfile start bbee1cc852 DynamicTablesPkg: Fix some spelling mistakes found by cspell c26490ea29 EmbeddedPkg: Fix some spelling mistakes found by cspell 669c5aa240 UefiPayloadPkg: Fix some spelling mistakes found by cspell 1f6dbab8d9 RedfishPkg: Fix some spelling mistakes found by cspell ecb0d1e2cb MdePkg: Fix some spelling mistakes found by cspell 394cbc4ab2 ArmVirtPkg: Fix some spelling mistakes found by cspell 7b1646d454 ArmPlatformPkg: Fix some spelling mistakes found by cspell cf60ca4366 .pytool: Sort the list of words in cspell.base.yaml bd23183ac9 .pytool: Add "MPIDR" to the list of known words in cspell.base.yaml b0e7a75a49 ShellPkg/AcpiView: Add MPAM Parser 3c8133ba87 ShellPkg: acpiview: Add routines to print reserved fields 8a036c8913 ShellPkg: acpiview: Add routine to print 16 chars 9e865f9579 ShellPkg/AcpiView: Update print-formatter prototype 107d0c3800 ShellPkg/AcpiView: Update field-validator prototype 29619603d2 MdePkg/IndustryStandard: Add definitions for MPAM ACPI specification 5c9b889b81 IntelFsp2WrapperPkg/FspmWrapperPeim: Fix FspT/M address for measurement 2d5390053f ArmVirtPkg: Switch all PrePeiCore users to new Sec.inf e85e29309e ArmPlatformPkg: Clone PrePeiUniCore into Sec 91117d70d8 ArmPlatformPkg: Clone PrePiUniCore into PeilessSec bbe26ca2cc ArmPlatformPkg/PrePi: Make some functions STATIC 12dc8d420b ArmPkg/ArmArchTimerLib: Drop pointless constructor e76b248d8f ArmPlatformPkg/PrePi: Drop call to TimerConstructor() 8c10017aa7 ArmVirtPkg/PrePi: Drop call to TimerConstructor() 1941a901f0 ArmPlatformPkg/PrePi: Drop secondary stack handling 9c1bc36ad1 ArmPlatformPkg/PrePeiCore: Drop secondary stack handling 96c8e75681 ArmPlatformPkg/PrePeiCore: Drop MPCore variant cee49c82d5 ArmPlatformPkg/PrePi: Drop MPCore variant 4fc1c513f8 ArmPlatformPkg: Drop bogus reference to MPCore related PCD caac25e22e ArmVirtPkg: Drop bogus reference to MPCore related PCD a679ceca97 CryptoPkg: Enable Openssl Accel builds for AARCH64 368f9b62a2 CryptoPkg/OpensslLib: Add AArch64Cap for arch specific hooks 9403422f21 CryptoPkg/OpensslLib: Generate files for AARCH64 native support 952ecf53f9 CryptoPkg/OpensslLib: Add native instruction support for AARCH64 1715d67231 MdePkg/BaseRngLib: Prefer ArmReadIdAA64Isar0Reg() over ArmReadIdIsar0() 30e53f8b5e MdePkg/BaseLib: AARCH64: Add ArmReadIdAA64Isar0Reg() a72d93e163 MdePkg/BaseLib: AARCH64: Add ArmReadCntPctReg() 71b9bda1ac BaseTools/Scripts/BinToPcd.py: Update regex strings to use raw strings. 85fad9912c MdePkg: Add PCI Express 6.0 Header Support 7e5a5ae154 MdePkg/Acpi65.h: Fix GUID value eed43245df CodeQlQueries.qls: Pin to the 1.1.0 codeq/cpp-queries pack ... changelog too long, skipping 406 lines ... downstream patch for corss compiling x86_64 2MB image on aarch64. ==== perl-XML-Parser ==== - Get package to show provides perl(XML::Parser::Expat) and other submodules ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Add patch from upstream to fix a crash with broadcasting sinks: * 0001-bluez5-fix-crash-with-broadcast-sinks.patch - Add patch from upstream to actually clear the mix io areas when being asked to clear it. Otherwise crashes might happen: * 0002-jack-actually-clear-the-mix-io.patch ==== python-kiwi ==== Version update (10.1.11 -> 10.1.15) - Bump version: 10.1.14 → 10.1.15 - Fixed sphinx_rtd_theme setup Delete obsolete display_version attribute - Evaluate eficsm everywhere Fixed _supports_bios_modules() to take an eventually provided eficsm setup into account. The grub config still searches for i386 grub modules even if eficsm="false" is set. - Fixed debian bootstrap script calls Run scripts as commands with their native shebang and not through bash. Not all debian package scripts uses bash, some of them uses sh which can be a link to dash or other interpreters. This Fixes #2660 - Update TW integration tests The package x86info was dropped from TW - Turn DiskFormat into an ordinary class - it does not need to be an abstract base class - use f-strings where applicable instead of format() - change return type of _custom_args_for_format from list to tuple - Add new containers section Allow to specify references to OCI containers in the image description like in the following example: <containers source="registry.suse.com" backend="podman"> <container name="some" tag="some" path="/some/path"/> </containers> During the kiwi process the containers are fetched into a temporary location and a systemd service is configured to one time load the containers into the local registry at first boot of the system. This Fixes #2663 - Bump version: 10.1.13 → 10.1.14 - Revert "Install usrmerge for Debian integration test" This reverts commit 95ac861741f14c4f35611c16328384c18e53dcfb. Solution needs to be provided in code - Install usrmerge for Debian integration test - Support older apt versions for bootstrap This Fixes #2660 - Run package scripts in apt bootstrap phase The bootstrap procedure based on apt only runs a manual collection of package scripts. This commit refactors the code that unpacks the bootstrap packages to a python implementation and adds a method to run the bootstrap scripts from all packages resolved by apt. - Bump version: 10.1.12 → 10.1.13 - Fix bundle extension for vagrant type When bundling result files that uses a vagrant type, kiwi creates them with the extension .vagrant.virtualbox.box or .vagrant.libvirt.box. The bundler code renames them using only the .box suffix which is too short as it is missing the subformat information. This commit fixes it and keeps this information in the result bundle file name. This Fixes #2656 - Use simple quotas (squota) for volumes - Add quota attribute to volume section Allow to set quota per volume for the btrfs filesystem This Fixes #2651 - Fix globbing with exclude with regex This fixes a collection of bugs when producing erofs images. On one hand, this ensures that an exclude of `/sys` doesn't accidentally match `/lib/libsystemd.so`, only `/sys/whatever`. On the other hand, this ensures that `/dev/*` does match `/dev/vda` and not just `/dev///////////`. This fixes libsystemd.so getting dropped in Kiwi-built FEX images. Signed-off-by: Alyssa Rosenzweig <alyssa@rosenzweig.io> - Honour custom exclude for filesystem builds All other call sites honour the custom exclude file, it's just this one that needs to be fixed. This unblocks use of Kiwi for generating FEX rootfs. Closes: #2652 Signed-off-by: Alyssa Rosenzweig <alyssa@rosenzweig.io> - test: storage: update clone_device tests with new block size Signed-off-by: Isaac True <isaac@is.having.coffee> - storage: clone_device: increase dd block size Increasing the block size used for dd reduces the time needed to clone a device. Signed-off-by: Isaac True <isaac@is.having.coffee> - Bump version: 10.1.11 → 10.1.12 - Add missing erofscompression validation In the filesystem builder I forgot to evaluate the erofscompression attribute. This Fixes #2647 - Include PI and comments in XSL stylesheets So far comments and processing instructions (PI) were ignored when applying the XSL stylesheets. This commit updates all stylesheets to take them into account ==== samba ==== Version update (4.21.0+git.363.84c94ca948f -> 4.21.1+git.367.e1da597d86e) Subpackages: libldb2 libldb2-32bit python3-ldb samba-ad-dc-libs samba-client samba-client-32bit samba-client-libs samba-client-libs-32bit samba-gpupdate samba-ldb-ldap samba-libs samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit - Adjust spec to split out rpcd_* binaries into a separate sub package; (bsc#1231414). - Update to 4.21.1 * DH reconnect error handling can lead to stale sharemode entries; (bso#15624). * "inherit permissions = yes" triggers assert() in vfs_default when creating a stream; (bso#15695). * Samba 4.21.0 broke FreeIPA domain member integration; (bso#15715). * Missing conversion for msDS-UserTGTLifetime, msDS- ComputerTGTLifetime and msDS-ServiceTGTLifetime on "samba- tool domain auth policy modify"; (bso#15692). * irpc_destructor may crash during shutdown; (bso#15280). * Durable handle is not granted when a previous OPEN exists with NoOplock; (bso#15649). * Durable handle is granted but reconnect fails; (bso#15651). * Disconnected durable handles with RH lease should not be purged by a new non conflicting open; (bso#15708). * net ads testjoin and other commands use the wrong secrets.tdb in a cluster; (bso#15714). * 4.21 using --with-system-mitkrb5 requires MIT krb5 1.16 as rfc 8009 etypes are used; (bso#15726). * VFS_OPEN_HOW_WITH_BACKUP_INTENT breaks shadow_copy2; (bso#15730). * Samba 4.20.0 DLZ module crashes BIND on startup; (bso#15643). * Cannot build libldb lmdb backend on a build without AD DC; (bso#15721). * Consistent log level for sighup handler; (bso#15706). ==== selinux-policy ==== Version update (20241018 -> 20241021) Subpackages: selinux-policy-targeted - Update to version 20241021: * rsync: add rsync_exec_commands boolean and enable it by default (bsc#1231494) * Allow snapperd to execute systemctl (bsc#1231489) ==== texlive ==== - Use zlib-ng-compat-devel - Let texlive-pdfjam-bin depend on /usr/bin/pdflatex (boo#1231783) ==== tigervnc ==== Subpackages: libXvnc1 xorg-x11-Xvnc xorg-x11-Xvnc-module - Do not ship rcFOO symlinks for CODE 16 (PED-266). - No longer use update alternatives on CODE 16: there are no alternatives for vncviewer present. ==== webkit2gtk3 ==== Version update (2.46.1 -> 2.46.2) Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Update to version 2.46.2: + Own well-known bus name on a11y bus. + Improve memory consumption when putImageData is used repeatedly on accelerated canvas. + Disable cached web process suspension for now to prevent leaks. + Improve text kerning with different combinations of antialias and hinting settings. + Destroy all network sessions on process exit. + Fix visible rectangle calculation when there are animations. + Fix the build with ENABLE_NOTIFICATIONS=OFF. + Fix the build with ENABLE_FULLSCREEN_API=OFF. + Fix the build with ENABLE_WEB_AUDIO=OFF. + Fix the build on ppc64le. + Fix several crashes and rendering issues. - Drop bug281495.patch: fixed upstream. ==== wireplumber ==== Subpackages: libwireplumber-0_5-0 wireplumber-audio wireplumber-lang wireplumber-zsh-completion - Add patch from upstream to fix switching automatically the profile of non-bluetooth devices (boo#1231815): * 0001-autoswitch-bluetooth-profile-switch-only-Bluetooth-devices.patch - Add patch from upstream to fix switching automatically the profile when starting some apps and then switching to the previous profile: * 0002-autoswitch-bluetooth-profile-Switch-to-HSP_HFP-on-timeout.patch - Add patches from upstream to fix a couple of memory leaks: * 0003-m-mixer-api-Fix-memory-in-leak-wp_mixer_api_set_volume.patch * 0004-module-dbus-connection-fix-GCancellable-leak.patch ==== xfsprogs ==== Version update (6.10.1 -> 6.11.0) Subpackages: libhandle1 - update to 6.11.0 - mkfs: break up the rest of the rtinit() function - mkfs: clean up the rtinit() function - xfs_repair: use library functions for orphanage creation - xfs_repair: use library functions to reset root/rbm/rsum inodes - xfs_repair: don't crash in get_inode_parent - xfs_repair: fix exchrange upgrade - xfs_db: port the iunlink command to use the libxfs iunlink function - xfs_db/mdrestore/repair: don't use the incore struct xfs_sb for offsets into struct xfs_dsb - xfs_db/mkfs/xfs_repair: port to use XFS_ICREATE_UNLINKABLE - xfs_db: port the unlink command to use libxfs_droplink - libxfs: implement get_random_u32 - libxfs: remove libxfs_dir_ialloc - libxfs: backport inode init code from the kernel - libxfs: pack icreate initialization parameters into a separate structure - xfs_io: add RWF_ATOMIC support to pwrite - libfrog: emulate deprecated attrlist functionality in libattr - misc: clean up code around attr_list_by_handle calls - fsck.xfs: fix fsck.xfs run by different shells when fsck.mode=force is set - libxfs: provide a memfd_create() wrapper if not present in libc - xfs_io: Fix fscrypt macros ordering - man: Update unit for fsx_extsize and fsx_cowextsize - xfs_db: release ip resource before returning from get_next_unlinked() - libxfs: kernel sync - ------------------------------------------------------------------ ==== xz ==== Version update (5.6.2 -> 5.6.3) Subpackages: liblzma5 liblzma5-x86-64-v3 xz-lang - Update to 5.6.3: * liblzma: - Fix x86-64 inline assembly compatibility with GNU Binutils older than 2.27. - Fix the build with GCC 4.2 on OpenBSD/sparc64. * xzdec: Display an error instead of failing silently if the unsupported option -M is specified. * lzmainfo: Fix integer overflows when rounding the dictionary and uncompressed sizes to the nearest mebibyte. * Autotools-based build: - Fix feature checks with link-time optimization (-flto). - Solaris: Fix a compatibility issue in version.sh. It matters if one wants to regenerate configure by running autoconf. * CMake: - Use paths relative to ${prefix} in liblzma.pc when possible. This is done only with CMake >= 3.20. - Prefer a C11 compiler over a C99 compiler but accept both. - Link Threads::Threads against liblzma using PRIVATE so that - pthread and such flags won't unnecessarily get included in the usage requirements of shared liblzma. That is, target_link_libraries(foo PRIVATE liblzma::liblzma) no longer adds -pthread if using POSIX threads and linking against shared liblzma. The threading flags are still added if linking against static liblzma. * Updated translations: Catalan, Chinese (simplified), and Brazilian Portuguese.